Job Title: Senior Security Analyst - Team Lead - Cyber Security, VAPT.

Job Description:

We are searching for a Senior Security Analyst, who is CEH/CISSP certified and hands-on experienced to lead and manage Vulnerability Assessment and Penetration Testing team and assignments of our clients - includes Web, Mobile Apps, Thick Client VAPT and API Security testing. Knowledge of Secure Code Review (SAST/DAST) and Red Teaming experience will have preference.

The primary function of this position is to contribute to VAPT business, lead and manage VAPT team, contribute to new VAPT business and manage existing assignments and must have working knowledge on using VAPT and SCR (Source Code review) tools .

Qualifications:

BE/B. Tech with specialization in cyber security, MCA, M. Tech / Masters in Information security, or Forensics Analysis Knowledge

Technical Certifications: CEH/CISSP/OSCP ( any one or two )

Experience: 6 to 8+ years of experience

Responsibilities:

- Conduct cyber-attack simulations as part of the RED team activity
- Conduct Vulnerability Assessment and Penetration Testing and configuration review for network, web application, mobile (Android & IoS) application and thick -client application
- Conduct configuration reviews for OS, DB, Firewall, routers, Switches and other security devices/components
- Perform manual testing of web applications
- Conduct source-code review using automated and manual approaches
- Prepare detailed reports
- Ensure timely delivery of status updates and final reports to clients
- Handle Clients queries
- Keep oneself updated on the latest IT Security news, exploits, hacks
- Identify and report vulnerabilities, provide recommendations, and track closure of identified vulnerabilities.




- Perform Configuration compliance assessments for Endpoints / Assets /network devices and help maintain the security settings at compliant level with Specific Security Standards.
- Perform regular monitoring of patch compliance of the assets in the network, Analyse Patch Advisories and provide remediation steps for the stakeholders.
- Abide by the project timelines and maintain project discipline.
- Perform RFP response on all cyber security Project like EDR/DLP along with VAPT services.
- Working on proposals of VAPT and contribute to managed SOC project (for threat hunting as necessary) .

Essential Skills

- Thorough and practical knowledge of OWASP
- Security Certified Skilled OSCP/CISSP/CEH
- Hands on experience with popular security tools Nessus, Burpsuite, Netsparker, Metasploit, KALI Linux etc.
- Working knowledge of manual testing of web applications
- Good knowledge of modifying and compiling exploit code
- Hands on experience of working on Windows and Linux
- Working knowledge of CIS Security benchmarks
- Good understanding and knowledge of codes languages
- Has practical experience in auditing various OS, DB, Network and Security technologies
- Microsoft office Word, Excel, PowerPoint
- Good understanding of firewalls, Switches, and Routers configuration settings and policies, relevant experience in performing rule base reviews and configuration reviews for network devices.
- Excellent Communication and Analytical skills. Highly detail oriented and strong interpersonal skills. Problem solving skills in a multi-
- Must have one certification into Information Security, Compliance & Risk Management at least.
- Displays leadership and business judgment in anticipating client/project needs and developing alternative solutions.
- Keeps him/herself up-date with latest information security updates.
- Knowledge of SOC Threat hunting & investigations will be beneficial.
- Knowledge of Brand protection and dark web monitoring tools will have advantage.

📌 Lead - VAPT (Mumbai)
🏢 Writer Information
📍 Mumbai